
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b.cer
File: de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b.cer (raw, json)
Hash identifier: OoPKXHfQTwRiomhZyE8hwQNkYZc4BBTcBTB98WiQplA=
Subject key identifier: 6E:C1:59:BC:12:59:CB:1A:EF:81:AA:75:0B:AC:8C:C2:73:48:37:18
Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8
Certificate serial: 010D0C9F4328584E98D752E250D66C1004227280
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 23 Jul 2026 18:45:14 +0000
Certificate not after: Tue 07 Dec 2027 04:44:31 +0000
Subordinate resources: AS: 40838
IP: 104.166.100.0/22
IP: 139.64.224.0/22
IP: 158.51.72.0/22
IP: 168.151.12.0/22
IP: 172.99.200.0/22
IP: 2604:2460::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:98:d7:52:e2:50:d6:6c:10:04:22:72:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8
Validity
Not Before: Jul 23 18:45:14 2026 GMT
Not After : Dec 7 04:44:31 2027 GMT
Subject: CN=de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:99:a5:85:d1:46:8d:7f:75:63:23:9d:16:b2:
3e:33:dc:ee:32:6a:56:92:88:33:d1:cc:c9:a0:86:
e2:a7:7c:ce:c8:10:ee:6d:e6:e4:3a:a6:47:b5:e4:
a2:c7:b2:a4:d3:ce:f2:52:52:2f:23:9f:ad:82:cb:
99:36:9a:dd:25:bc:00:98:80:77:49:5d:f9:d0:cc:
42:f2:d7:30:5a:3a:f0:b0:5c:67:3d:21:d0:f8:e5:
40:08:75:02:9a:03:75:28:b9:8e:13:9f:5a:b7:cf:
ef:60:84:4d:07:40:b1:52:d9:fd:03:bf:4b:16:ea:
35:bc:08:34:78:72:a9:cd:4e:f2:3f:f6:bd:d9:99:
5e:27:2c:f9:8d:62:6f:b9:de:9d:12:27:da:a1:75:
8b:63:ad:b8:f7:12:7f:87:7e:e3:10:a0:1e:2b:87:
56:8d:61:49:3b:10:35:8e:d1:b4:41:e4:bd:4e:8c:
02:bf:2a:41:9e:38:30:ee:99:c5:36:79:ac:78:a9:
d2:8b:00:6a:d0:26:b4:63:5d:2d:d0:7b:da:a2:1e:
a7:03:91:a6:7f:a8:a3:22:4f:1b:e0:d5:d6:a4:ca:
7f:ff:b0:e6:50:f8:22:13:c9:ea:f6:7c:d0:62:a9:
9b:30:14:97:e4:54:f6:90:4b:62:90:35:cd:09:71:
f9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C1:59:BC:12:59:CB:1A:EF:81:AA:75:0B:AC:8C:C2:73:48:37:18
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
X509v3 Authority Key Identifier:
keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.166.100.0/22
139.64.224.0/22
158.51.72.0/22
168.151.12.0/22
172.99.200.0/22
IPv6:
2604:2460::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
40838
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:ea:8a:cf:90:74:8d:88:d9:c1:fd:16:5f:62:8b:38:f1:a5:
dd:89:72:46:b1:ce:88:4b:97:3c:97:86:78:7c:1e:47:9f:b5:
4a:cd:15:43:7f:23:eb:9d:c7:fc:58:eb:ac:bb:02:06:45:ac:
8c:65:21:46:a7:23:9d:0d:f6:dc:5b:29:4d:1d:b8:30:be:47:
5a:17:e6:0c:87:17:53:6a:26:cb:fc:d6:68:08:2d:80:a6:68:
cc:a1:81:76:04:08:35:bb:ed:5a:c7:96:cd:bc:ae:5c:32:4d:
5c:73:61:10:ee:66:8e:1a:ca:75:aa:14:33:ab:3f:38:c2:8d:
d2:ff:e9:2f:57:73:25:15:4e:20:e2:e1:30:83:c7:59:3d:bd:
86:01:12:fe:34:a1:c1:6d:19:f6:ba:a1:a7:9c:a3:1f:9f:f3:
ca:b0:d0:03:f1:56:e6:4b:32:6e:ef:54:e8:e8:06:d0:55:6d:
ff:a2:e6:f2:26:21:3e:be:e4:71:f6:8c:57:b8:4c:47:6d:21:
be:01:57:4d:06:a5:c9:8c:47:d8:f3:43:12:66:58:57:df:9f:
1e:45:36:33:06:c6:f4:58:0d:dc:2c:61:48:9f:1c:9f:41:e5:
7c:08:77:4d:e0:ae:c7:34:bf:9d:53:ef:0c:96:b4:9a:02:ce:
49:d6:34:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:33:16 2026 by rpki-client